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q! Introduction 

The notion of realizability algebra, which was introduced in [TTl IB] , is a tool to study the 
proof-program correspondence and to build models of set theory. 

It is a variant of the well known notion of combinatory algebra, with a new instruction cc, 
and a new type for the environments. 

The sets of forcing conditions, in common use in set theory, are (very) particular cases of 
realizability algebras. 

We show here how to extend an arbitrary realizability algebra, by means of a certain set 
of conditions, so that the axiom DC of dependent choice is realized. 
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*0 ■ In order to avoid introducing new instructions, we use an idea of A. Miquel |19j . 

q . This technique has applications of two kinds : 

1. Construction of models of ZF + DC. 

When the initial realizability algebra is not trivial (that is if the associated Boolean 
| algebra 12 is 7^ {0, 1}, in other words, if we are not in the case of forcing), then we obtain 

always a model of ZF + DC in which K is not well orderable. 

We show in this way, for instance, the relative consistency over ZF, of the following two 
theories : 

i) ZF + DC + there exists an increasing function i 1— > Xj, from the countable atomless 
Boolean algebra B into V(M) such that : 
X = {0} ; i 7^ =>- Xi is not countable ; 

X-iAj = Xi R Xj ; 

i A j = =>■ X iV j is equipotent with Xj x Xj ; 
Xi x Xi is equipotent with Xj ; 
there exists a surjection from X\ onto R ; 
if there exists a surjection from Xj onto Xj, then i < j ; 

more generally, if A C B and if there exists a surjection from [jj eA Xj onto Xj, then 
i < j for some j G A. 

ii) ZF + DC + there exists X C R such that : 
X is not countable and there is no surjection from X onto Ki 
(and therefore, every well orderable subset of X is countable) ; 
X x X is equipotent with X ; 
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there exists a total order on X, every proper initial segment of which is countable ; 

there exists a surjection from Xx^ onto K ; 

there exists an injection from Ki (thus also from X x Ni) into R. 

2. Curry-Howard correspondence. 

With this technique of extension of realizability algebras, we can obtain a program from 
a proof, in ZF + DC, of an arithmetical formula F, which is a A c -term, that is, a A-term 
containing cc, but no other new instruction. 

This is a notable difference with the method given in [HI [15], where we use the instruction 
quote and which is, on the other hand, simpler and not limited to arithmetical formulas. 

It is important to observe that the program we get in this way does not really depends on 
the given proof of DC — > F in ZF, but only on the program P extracted from this proof, 
which is a closed A c -term. We get it by means of an operation of compilation applied to P 
(look at the remark at the end of the introduction of [T7]). 

Finally, apart from applications 1 and 2, we may notice theorem [191 which gives an 
interesting property of every realizability model of ZF e : as soon as the Boolean algebra 12 
is not trivial (i.e. if the model is not a forcing model), there exists a non well orderable 
individual. 



1 Generalities 



Realizability algebras 

It is a first order structure, which is defined in [17]. We recall here briefly the definition 
and some essential properties : 

A realizability algebra is made up of three sets : A (the set of terms), IT (the set of stacks), 
A * II (the set of processes) with the following operations : 

{£,,v) ^ (Ov from A 2 into A (application) ; 
(£, 7r) h-> £ . 7r from A x II into II (push) ; 
(£, 7r) i— > £ * 7r from A x II into A * IT (process) ; 
7T h-> from II into A (continuation) . 

There is, in A, distinguished elements B, C, E, I, K, W, cc, called elementary combinators 
or instructions. 

Notation. 

The term (. . . (((Ovi^) ■ ■ -)Vn will be also written (Cjrji^ . . . rj n or £77x772 . . . r] n . 
For instance : £r/C = (OvC = (€v)( = ((Ov)C- 

We define a preorder on A * II, denoted by y, which is called execution ; 
£ * 7T y £' * 7r' is read as : the process £ * 7r reduces to £' *7r'. 

It is the smallest reflexive and transitive binary relation, such that, for any £, 77, £ G A 
and 7r, cc/ G II, we have : 

(£)r/*7r >- £*r/ . vr. 

I * £ . 7T >~ £ * 7T. 

K*£ . rj . 7r y £*7r. 
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E * £ . 1] . 7T >- (£)r/ * 71. 

C*t;.ri.(.7i>~( i 'k(.ri.7r. 
B*£ . i] . ( . it y (0(v)C*^' 
cc-k^.Try^-kkx.Ti. 
k^-k^.wy^-kn. 

We are also given a subset X of A * II such that : 

£*7T y f'*7T', £'*Tt' G X =► £*7rGX. 

Given two processes £ * 7r, £' * 7r', the notation I; * n y- * ir' means : 

£ * 7T £ X => £' * 7T' ^ X. 

Given two terms £, £' G A, the notation £ >^ £' means : 

(VVT G II)(£*7r £ X =>■ £'*7T ^ X). 

Therefore, obviously, £ * 7r >~ £' * 7r' =>- £ * 7r >^ * 7r'. 

Finally, we choose a set of terms QP.4 C A, containing the elementary combinators : 
B, C, E, I, K, W, cc and closed by application. They are called the proof-like terms of the 
algebra A. We write also QP instead of QP.4 if there is no ambiguity about A. 
The algebra A is called coherent if, for every proof-like term 9 G QP^, there exists a 
stack 7T such that 9 * ir ^ X. 



c-terms and A-terms 

The terms of the language of combinatory algebra, built with variables, elementary combi- 
nators and the application (binary operation) will be called combinatory terms or c-terms, 
in order to distinguish them from the terms of the algebra A, which are elements of A. 
Each closed c-term (i.e. without variable) takes a value in the algebra A, which is a 
proof-like term of A. 

Given a c-term t and a variable x, we define inductively on t, a new c-term denoted 
by Xxt, which does not contain x. To this aim, we apply the first possible case in the 
following list : 

1. Xxt = (K)t if t does not contain x. 

2. \xx = I. 

3. Xxtu = (CXx(E)t)u if u does not contain x. 

4. Xxtx = (E)t if t does not contain x. 

5. Xxtx = (W)Ax(E)t (if t contains x). 

6. Xx(t)(u)v = Xx(B)tuv (if uv contains x). 

In [T7], it is shown that this definition is correct. This allows us to translate every A-term 
into a c-term. In the following, almost every c-term will be written as a A-term. 

The fundamental property of this translation is given by theorem (TJ which is proved 
in [TH : 

Theorem 1. Let t be a c-term with the only variables xi, . . . , x n ; let £i, . . . , £ n G A and 
n G II. Then Xxi . . . Xx n t * £i £ n . tc y t[£i/xi, . . . , £ n /x n ] *7r. 
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Realizability models 

The language we use in order to formalise set theory is made up of the three binary 
relation symbols ^,^,C and of some function symbols. The only logical symbols are 

Notations. Let Ax, . . . , A n , A, B be some formulas. Then : 
A — > _L is written ->A ; 

A x ->■ (A 2 y {A n B) ■ ■ •) is written A x ,A 2 ,...,A n -+B\ 

->Ai, . . . , ->A n — > J_ is written A\ V ... V A n ; 
(Ax, ■ ■ ■ , A n ->• _L) ->■ ± is written Ax A ... A A n ; 
->Wx(Ax, ■ ■ ■ , A n — y _L) is written 3x{t4 1; . . . , A n } ; 
a e b is the formula a^b — )-±;aG&isa^6— >■_!_. 

In this language, we write the axioms of a theory named ZF £ , which are given in [IB"] . 
The usual set theory ZF is supposed written with the only symbols ^, C. 
Then, ZF £ is a conservative extension of ZF. 

Let us consider a coherent realizability algebra ^4 , defined in a model A4 of ZFL, which is 
called the ground model. The elements of A4 will be called individuals (in order to avoid 
the word set, as far as possible). 

We defined, in [18], a realizability model, denoted by Af^ (or even Af, if there is no 
ambiguity about the algebra .4). 

It has the same domain (the same individuals) as A4 and the interpretation of the function 
symbols is the same as in A4. 

Each closed formula F of ZF e with parameters in A4, has two truth values in A", which 
are denoted by ||F|| C II and \F\ C A. Let us give their definitions : 

\F\ is defined immediately from ||F|| as follows : 

£ G \F\ (Vtt g ||F||)f *tt G X. 
We shall write £ |j- F (read " £ realizes F ") for £ G 
||F|| is now defined by recurrence on the length of F : 

• F is atomic ; 

then F has one of the forms T, _L, a^b, a C 6, a ^ 6 where a, 6 are parameters in A4. 
We set : 

||T|| = ; 1 1 _l_ 1 1 = II ; ||a^6|| = {vr G II; (a, tt) G 6}. 

|| a ^= || a ^ &|| are defined simultaneously by induction on (rk(a) Urk(6),rk(a) Rrk(6)) 
(rk(a) being the rank of a in A4). 

\\a C 6|| = |J{£ . tt; £ G A, vr G n, (c, vr) G a, £ |h c ^ 6} ; 

c 

l|a£&ll =U^-^'- 7r; £'£' G A ' 71 Gl1 ' ( c ^) e6 > Clh aCc, £' ||- cCa}. 

c 

• F = A^B; then ||F|| = {£ . tt ; £ ||- 4, tt G ||B||}. 

• F = Vx4:then ||F|| = (J ||A[o/x] ||. 

a 

Given a set of terms X and a formula F, we shall use the notation X — > F as an extended 
formula ; its truth value is ||X — )■ F|| = {£ . 7T ; £ G X, tt G ||F||}. 
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The following theorem, proved in [18] , is an essential tool : 
Theorem 2 (Adequacy lemma). 

Let Ai, ... , A n , A be closed formulas of ZF £ , and suppose that x\ : Ai, . . . , x n : A n h t : A. 
If £1 \\- Ai,...,£ n |(- A n then t[£i/xi, . . . , £n/x n ] \\- A - 
In particular, if h t : A, then t |j- A. 

Let F be a closed formula of ZF e , with parameters in Ai. We say that A/ a realizes F 
or that F is realized in A/a (which is written A/a \\~ F or even ||— F), if there exists a 
proof-like term 9 such that ||- F. 

Two formulas . . . ,x n ] and G[xi, . . . , x n ] of ZF e will be called interchangeable if the 
formula Vxi . . . Wx n (F[xi, . . . ,x n ) «-» . . . , x n ]) is realized. 
It is, for instance, the case if H-Ffai, ■ ■ ■ ,CL n }\\ = H^ai, . . . ,a n ]\\ 

or also if ||F[ai, . . . ,a n ]|| = \\->->G[a!, ...,a n )\\ 
for every a 1; . . . , a n G Ai. 

It is shown in [18] that all the axioms of ZF £ are realized in A/a, and thus also all the 
axioms of ZF. 

Type-like sets and equality 

We set IX = XxH for every individual X of Ai ; we define the quantifier Vx as follows : 

||Vx^F[x]||=U ae xll^HII- 
Of course, we set Eb ,F[x] = -tfx —>F[x]. 

The quantifier \/xr x has the intended meaning, which is that the formulas Var^ F[x] and 
^x(xelX — > are interchangeable. This is shown by the : 

Lemma 3. 

C/ ||- Vx 2x F[x] ^Vx^ x ^F[x] ; 
cc |f- Wx^ x ^F[x] -> Vx 3x F[x] ; 
||Vz 3x ^-F[z]|| = ||Vx(^F[x] -^x^X)||. 

Immediate. 

Q.E.D. 

Each functional f : Ai n Ai, defined in Ai by a formula of ZF with parameters, gives 
a function symbol, that we denote also by /, and which has the same interpretation in 
the realizability model A/a- 

If / : X\ x • • -xX n — > Y is a function in AI, its interpretation in A/4 is also a function 
/ : IXi x • • • x HX n — >■ 1Y . 

The formula x = y is, by definition, \/z(x z — »• y ^ z) (Leibniz equality). 

Si t, it are terms of the language of ZF and F is a formula of ZF e , with parameters in Ai, 

we define the formula t = u >■ F '. When it is closed, its truth value is : 

||t = u c — y F\\ = ||T|| = if M h M u ; \\t = u ^ F\\ = \\F\\ if Ai |= t = u. 

The formula t = u > J_ is written t ^ u. 

The formula ti = U! <— )■ (t 2 = ^2 ^ • ■ ■ ^ (^n = u n F) • • •) is written : 
t x = m, t 2 = u 2 , ■ ■ ■ , t n = u n ^ F. 

The formulas t = u — > F and t = u F are interchangeable, as is shown in the : 
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Lemma 4. 

Xxx I \\- Mxiy {{x = y -> F) ->■ (x = y F)) ; 
Xx\y(cc)Xk(y)(k)x |f- WxWy ((x — y ^ F) ->■ (x — y -> F)). 

Immediate. 

Q.E.D. 

Proposition 5. 

Let t, ti, . . . , t n , u, u%, . . . ,u n be terms which are built with variables X\, . . . , x k and func- 
tional symbols of M. . 

If Mi |= Vxi . . .Wxk(ti — U\, . . . , tk — Uk — y t — u), then : 
I \\- Vxi . . . VXfe(ti = U\, . . .,t k = Uk ^ t = u). 

If M\= (Vzi G Xi) . . . (\/x k G X k ){tx = Ui, . . . , t k = u k ->> t = u), then : 
I \\- \/x\ Xl . . . VxJ Xfc (ti = Ul , . . . ,t k = u k 1 = u). 

Trivial. 

Q.E.D. 

The set 2 = {0, 1} is equipped with the trivial boolean functions, written a, v, -i. 
The extension to Ma of these operations gives a structure of Boolean algebra on 32. 
It will be called the characteristic Boolean algebra of the model Ma- 

Conservation of well-foundedness 

Theorem [6] says that every well founded relation on a set X, in the ground model Ml, 
gives a well founded relation on IX in the realizability model M . 

Theorem 6. Let f : X 2 — > 2 be such that f(x,y) = 1 is a well founded relation on X, in 
the ground model Ml. Then, for every formula F[x] of ZF £ with parameters in M : 
Y ||- Vx :x (V*(/(y,x) = 1 F[y}) ->■ F[x\) ->■ Vx 2x F[x\ 
with Y = AA and A = XaXf(f)(a)af . 

Let us fix a G X and let £ |(- Vx^ x (\/y 2x (f(y, x) = 1 <^ F[y)) F[x)). We show, by 
induction on a, following the well founded relation f(x,y) = 1, that Y * £ . 7r G JL for 
every n G ||F[a]||. 

Thus, suppose that 7r G H-^HH ; since Y * £ . 7r >- £ * Y£ . 7T, we need to show that 
£ * Y£ . 7r G X. By hypothesis, we have £ ||- Vy 2x (f(y, a) — 1 F[y]) -> F[a] ; thus, it 
suffices to show that : 

Y£ ||— fib, a) — 1 <^-> for every 6 G X. This is clear if fib, a) ^ 1, by definition 

of <^-K 

If fib, a) = 1, we must show Y£ ||- F[b], i.e. Y*(.pG X for every p G But 
this follows from the induction hypothesis. 
Q.E.D. 

Integers 

Let £,77 G A and n G N ; we define (£) n r/ G A by setting (£)°7) = rj ; (£) n+1 r? = (£)(£) n? 7- 
For n G N, we define n = (<x) n with = Kl and a = (BW)(B)B ; 
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n is "the integer n" and a the "successor" in combinatory logic. 
The essential property of a is: a-k^.^.r/.-K^v-k^.^r].^. 

We set N A = {(n, n . it) ; n G N, 7r G 11} ; it is shown below that is the set of integers 
of the realizability model M A 

We define the quantifier Vx mt as follows : 

||Vx int F[x]|| = {n.ii ; n G N, tt G ||F[n]||}. 

that is also : 

||Vx int F[x]|| = ||Vn m ({n} -> F[n})\\. 
The formulas Vx mt F[x] and \/x(xeN A — > F[x]) are interchangeable, as is shown in the : 

Lemma 7. 

Xx\n\y(y)(x)n |f- Vx m< F[s] — >■ Vx m< -i-iF[x] ; 
Xx\n(cc)(x)n \\- \/x mt ^F[x\ ^Vx mt F[x] ; 
\\Vx mt ^F[x]\\ = ||Va:(-.F[x] -^x^ A )\\. 

Immediate 
Q.E.D. 

Lemma 8. 

i) K\\- Vx(x£lN ^x£N A ). 

II) Xx{x% |h 0^->_L ; XfXx(f)(a)x \\- Vy^{(y + 1) £N A ^ y £N A ). 

III) I |f- Vx mt (Vy 2N {F[y] ->• F[y + 1]), F[0] ->■ /or every formula F[x] of ZF e . 

i) and ii) Immediate. 

iii) We show that I |f- Vx int (Vy 2N (F[y] -^F[y + 1)), F[i) -»■ F[x + i]) for every i G N. 
Let n G N, \\- Vy^(F[y) -»■ F[y + l]),a |f- ^[i] et tt G ||F[n +i]||. We must show : 
n~k<j).a.TC G JL, which is done by recurrence on n. 
If n = 0, we have O*0.a:.7r>^a:*7rG X since 7T G \\F[i] || . 

Now, we have n + 1 *0 . a .n a -kn. 4> . a . n )¥- n* • 0a • 7r . But we have a |f- F[i] 
and |f- F[i] — »■ + Thus, we have 0a |j- + ; but we have 7r G ||F[n + i + 1] ||. 
It follows that n~k(j) . 0a .tt G 1 by the recurrence hypothesis. 

Q.E.D. 

Lemma [S^i) shows that N4 is a subset of UN. 

But it is clear that UN contains and is closed by the function n 1— > n + 1. 

Now, by lemma [H^ii) and (iii), N A is the smallest subset of UN which contains and is 

closed by the function n^n + l. Therefore : 

N A is the set of integers of the model M A . 

The following lemma will be used in section |3j 
Lemma 9 (Storage lemma). 

Let q, O, 9 G A be such that q )¥- a, O and 6 = XfXn(n)XgXz(g)(f)z. 
For every n G N, n G II and £, 0, a G A, we /jat> e : 
6*0. (q) n O . i . a . 7T £ * (0) n a . 7r. 

It suffices to show that (q) n O * XgXz(g)(<p)z . £ . a . ir )¥- £ * (0) n a . 71", which is done by 
recurrence on n. For n = 0, we have : 
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* \g\z(g)((f))z . £ . a . n )¥- * XgXz(g)((f))z .^.a.n^^-ka.ir. 
Now, we have : 

(q) n+1 -k \g\z(g)(4>)z . £ . a . tt »- a * (q) n O . XgXz(g)((f))z . £ . a . tt 

{<,) n O * XgXz{g){(t))z . {XgXz{g){(t))z)i . a . tt 
>?>- (XgXz(g)(4>)z)S > * (<fi) n a • tt by the recurrence hypothesis 
>^ 1* • tt which is £ * (<f)) n+1 a . tt. 

Q.E.D. 

2 The characteristic Boolean algebra 32 
Function symbols 

Let us now define the principal function symbols commonly used in the sequel : 

• The projections pr :XxF->l and pr\ : X xY ^ Y defined by : 

pr (x,y) = x, pn(x,y) = y 

give, in a bijection from ](XxF) onto iXxlY . 

• The function app : Y x xX — >■ F (read application) defined in .M by app(/, x) = /(x) 
gives, in A/a, an injection from 3(F X ) into (HF)- IX . Indeed, we have : 

I |h \/f(Y x )\/gKY x ) (Vx^(app(/,x) = app^x)) / = g). 
We shall write f(x) for app(/, x). 

• Let sp : Ai — > {0, 1} (read support) the unary function symbol defined by : 
sp (0) = ; sp(x) = 1 if x ^ 0. 

In the realizability model A/"_4, we have sp : A/" — > 22. 

• Let P : {0, 1} x Ai — > Ai (read projection) the binary function symbol defined by : 
P(0,x) = ; P(l,x) = x. 

In the realizability model AC4, we have P : 12 x Af — > Af. 
We shall write Pj(x) instead of P(i,x). 

When t, u are terms with values in 22, we write t < u for t/\u = t. 
Proposition 10. 

i) I hW 2 Wx(P t (P J (x)) = P lA3 (x)). 

ii) I \\- Vr 2 Vx(Pi(x) = x sp(x) < i). 

m) If® EE, then I \\- Vx^Vi^P^x) elE). 

iv) If f : Ai n — > Ai is a function symbol such that /(0, . . . , 0) = 0, then : 
I |h V^ 2 Vx! . . . Vx„ (^(/(an, . . . , x n )) = /(Pi(a;i), . . . , P % {x n ))). 

Trivial. 

Q.E.D. 

Because of property (iv), we shall define, as far as possible, each function symbol / in M, 
so that to have /(0, . . . , 0) = 0. 

• Thus the ordered pair (x, y) is changed by setting (0, 0) = 0. Then, we have : 

1 |h V^ 2 VxVy(P,((x,y)) = (P^x),^))). 

• We define the binary function symbol U : Ai 2 — > Ai by setting : a U b = a U b. 
Remark. The extension to Af of this operation is not the union U. 
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The operation 3, 

Let E e M be such that G E. In M, we define \E for i G 2 by setting : 

!Io£ = J{0} = {0}xll ; HiE = H22 = 22x11. 

In this way, we have now defined \E in J\f, for every ie32. 

Proposition 11. 

i) I |(- Vi ;i2 VxV?/(Pi(x Uy) = Pi{x) U Pi(y)). 
/ |J- Vz 32 Vj 32 Vx(P iV j(a;) = P<(ar) U Pj{x)). 

iii) I ||- V^Vj^VxVyV^^Aj = 0, z = Pj(x) U Pj(y) Pi(-z) = Pi(x)). 
I \\- \/i 22 Wf 2 WxWyWzliAj = 0, z = P^x) U Pj(y) m> P-(z) = Pj{y)). 

w) I |f- Vr^Vj^Va^V^Vz (zaj = 0, z = Pi{x) U P,-(y) 2£^ vi E). 

Trivial. 
Q.E.D. 

Proposition 12. 

If $ £ E, E' , the following formulas are realized : 
i) \E increases with i. In particular, \E C HE 1 . 

TTie e-elements of\E are the Pi(x) forxelE. 
Hi) The e-elements of Hi 22 are those of IE such that sp(x) < i. 

iv) The only e-element common to 2iE and 3i_j22 is 0. 

v) If ihj = 0, then the application x i-> (Pi(x), Pj(x)) is a bijection from Hi V j22 
onto liExljE. The inverse function is (x, y) i— > x U y. 

vi) X(ExE') = \Ex\E'. 

We check immediately i), ii), iii), iv) below : 

i) I |h V^ 2 Vj 32 Vx(mj = i ^ (xfljE ->■ x^E)). 

ii) I \\- Vz 32 Vx^(P i (x)^ i E — )■ _L) ; I ||- Vz 32 Va;^(P i (x) ^ x -> £^22). 

iii) I ||- yi 22 Wx 1E (x^ i E sp(ac)i 7^ sp(a;)) ; I ||- Vi^Vx^sp^i 7^ sp(ar) -»• xfiXE) ; 

iv) I |J- V^Va^V^P^) = Pi_i(j/) P^ar) = 0). 

v) By proposition fTOlfiv) . we have I ||- \/i^ 2 Vx\/y(Pi((x,y)) = (Pi(x), Pi(y))). 
By proposition [TlT iii.iv) . if x,yelE, there exists zeXvjE such that : 

Pi(z) = Pi(x), Pj(z) = Pj(y), namely z = Pi(x) U Pj(y). 

vi) By proposition [TTTii) . we have Pi(x) U Pj(x) = Pi V j(x) = x if xeXvjE. 

Q.E.D. 

Proposition 13. Let G M 6e such that G 22, E' and E is equipotent with E' . 

Then \\- \/f 2 (2iE is equipotent with\E'). 

Let (f) be, in Ai, a bijection from E onto 22", such that 0(0) = 0. Then <p is, in A/", a 
bijection from 2E onto H22'. But we have immediately : I ||— Vr ,2 Var' E (<f>(Pix) = Pi </>(#)). 
This shows that is a bijection from \E onto Hi22'. 

Q.E.D. 
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Some general theorems 

Theorems [14] to [22J, which are shown in this section, are valid in every realizability model. 

In the ground model Ai, which satisfies ZFL, we denote by k the cardinal of A U II U N 
(which we shall also call the cardinal of A) and by n + = V(k) the power set of k. 

Theorem 14. 

Let \/xiy F[x, y] be a closed formula of ZF £ with parameters in Ai ( where x = (xx, ■ ■ ■ , x n ) ). 
Then, there exists in Ai, a functional fp : KxAi n — >■ Ai such that : 

i) If a,b G Ai and £ |(- F[a, b], then there exists a G k such that £ \\- F[a, f F (a, a)}. 

ii) CI \\- Mxiy (F[x,y) ->■ 3i? R F[x, fp{v,xj\) . 

i) Let £ i — y ot^ be an injection from A into k. Using the principle of choice in Ad (which 
satisfies V = L), we can define a functional fp '■ KXAi n — » Ai such that, in Ai, we 
have : VxVy(V£ G A) (f ||- y] £ Ih *)])■ 

ii) Let f 1^ F[a, 6], 77 |h Vi/^-iFfa, / F (z/, a)] and vr G n. 

Thus, we have 77 ||— ->-F[a, f F (a^, a)] ; by definition of /p, we have £ ||— F[a, /j?(a^, a)]. 
Therefore 77 * £ . n G JL, and C I * £ . 77 . 7r G JL. 
Q.E.D. 



Subsets of 2 



Theorem 15. Let VxVyVz F[x,y, z] be a closed formula of ZF e , with parameters in Ai. 
Then, there exists, in Ai, a functional (3p : Ai — > tt+ such that : 
W |h Vz (VzVyVj/'(F[z, y, z], F[x, y', z] -> y = y') 

->■ V^ 2 Vx(F[x, Pi(/3 F (z)), 2] -> sp(a:) > z)) . 

In particular, for i = 1, we have : 

W |h Vz(VarVyVj/'(F[x,j/,z],F[a;,y',2;] -> y = y') -> Vx(F[x, /5 F (z), 2] ->■ sp(x) = 1). 

By theorem IT4T i) . there exists, in AI, a functional g : kx Ai 2 — > Ai such that : 

(*) For a, b, c G Ai and £ |j- F[a, 6, c], there exists a G /« such that £ |j- F[a, g>(a, a, c), c]. 

Using the principle of choice in Ai, we define a functional /3p : AI — > n + such that : 
for every a G K and c G AI, we have /3f(c) 7^ (/(a, 0, c). 
This is possible since k + is of cardinal > k. 

Now let: a,ce Ai, 1 G {0, 1}, |h VxVyVy'(F[x, y, c], F[x, y', c], y ^ y' -> ±), 
£ |h F[a, Pi((3p(c)), c], rj |h sp(a)z 7^ z and 7r G IT. 

We must show that W*0.£.77.7rG-lL, that is 0*£.£.77.7rG_lL. 

We set b = Pj(/3p(c)) and therefore, we have £ |h F[a, 6, c]. 
Thus, by (*), we have £ ||- F[a, g(a, a, c), c] for some a G «. 

Let us show that \\b 7^ g(ot,a, c)|| C ||sp(a)z 7^ z|| ; there are three possible cases : 

If i = 0, then ||sp(a)z 7^ z|| = ||0 7^ 0|| = IT, hence the result. 

If % = 1 and a 7^ 0, then ||sp(a)z 7^ i|| = ||1 7^ 1|| = LT, hence the result. 

If % = 1 and a = 0, then : 

\\b ^ g(a,a,c)\\ = \\Pi(f3 F (c)) ^ g(a,a,c)\\ = \\/3 F (c) ^ g(a,$,c)\\ = ||T|| = 0, by 
definition of (3p, hence the result. 
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It follows that f] \\- b ^ g(a, a, c). Now, we have seen that : 
f lh F[a,b,c] and f ||- F[a,g(a,a,c),c]. 
Therefore, by hypothesis on 0, we have 0*£.£.r/.7rG-lL. 
Q.E.D. 

Corollary 16. The following formulas are realized : 

WEWf 2 Wj^ 2 (if there exists a surjection from 2jE onto then j > i). 

More generally : 

\/EVp 2 (there exists no surjection from [J{2jE ; j el2,j ^ i} onto 
In particular, with i = 1 : 

WE(there exists no surjection from {J{ljE ; j el2,j ^ 1} onto 

Remark. The notation |J-pj.E ; j e22,j ^ i} denotes any individual X of M such that : 

We apply theorem [151 with the formula y, 2] = (x, y) e z. 
In the realizabiblity model A/", we have ftp : A/" — > 
Let be, in J\f, a surjective function onto 
We have (3f(z ) e k + , and therefore P^f^o)) 

If xo is such that (xo, Pi((3F(zo))) e z , then sp(xo) > i by theorem [T5l Therefore, for any 
individual E, we have x^eljE =>j>i. 

Q.E.D. 

Theorem 17. The formula : (there exists a surjection from 1k + onto 2^ K ) is realized. 

In the ground model Ai, there exists a bijection from k + = 2 K onto 2 KxU . Therefore, in A/", 
there exists a bijection from Hk + onto 22 Kxn . 
We now need a surjection from 22 kxU onto 2 . 

Let : M. — > 2 Kxn be the unary function symbol defined by <j>{x) — xC\ (kxII). 
In A/", we have : A/" — >■ H2 KXl1 . Now, we check immediately that : 

i) I |(- Vz/Var I2Kxn (z/^II/« — > vfix) (because ||^^a|| C for all a G ?(kxII)). 

ii) I |(- VxVz/-' K (z/^x vfi<j){x)) (because ||i^a|| = ||z/^0(a)|| for all v G k). 

From (i), it follows that 22 kxU is, in M, a set of subsets of Ik, ; 

from (ii), it follows that it contains at least one representative for each equivalence class 
of extensionality. 

Thus the desired surjection simply associates, with each e-element of }2 Kxn , its equivalence 
class of extensionality. 

Q.E.D. 

Theorem 18. Let E G Ai be infinite and such that G E. Then we have : 
||— Vz (z 7^ — > there exists an injection from N z'n£o HjE). 

In A4, let : N -)> (E \ {0}) be injective. In J\f, we have : UN -)> HE. The desired 

function is n i-> P(i, 0(n)). Indeed, we have : 

I |h W 2 Vm 3N V^ N (i ^ ->• Pi(0(m + n + 1)) ^ Pi(0(m))). 

This shows that the restriction of this function to (the set of integers of Ad) is injective. 

Q.E.D. 
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Theorem 19. |(— Vi" 12 (i 7^ 0, i ^ 1 — > Q/c+ cannot be well ordered)). 

Let z G 32, i ^ 0,1 ; then, and are infinite (theorem [T8|) and C 2n + by 

proposition IT27 i). But there exists no surjection from \k + onto neither from 

onto by corollary IT6l 

Q.E.D. 

Remark. By theorem [191 if the Boolean algebra 22 is not trivial, then 2k + is not well orderable. 
On the other hand, it can be shown that, if this Boolean algebra is trivial, then the realizability 
model N is an extension by forcing of the ground model M. In this case, Af itself can be well 
ordered, since we suppose that the ground model M. satisfies ZFL. 

A strict order on 2k + 

A binary relation < on X is a strict order if it is transitive [x < y,y < z =>- x < z) and 
antireflexive (x ^ x). This strict order is called total if we have : x<yory<xorx = y. 
If (X , < ), (Xi, <i) are two strictly ordered sets, then the strict order product < on 
XqxXi is defined by : (x ,Xi) < (yo,yi) x < y and X\ < y\. 

Lemma 20. If the strict order product of (X , < ), <i) is well founded, then one of 
the strict orders < , <i is well founded. 

Proof by contradiction : if E C X , Ex C X\ are non void and have no minimal e-element, 
then EqxEi C Xq x Xi has the same properties. 

Q.E.D. 

We denote by < a strict well ordering oiiK + ,inA1 ; we suppose that its least element is 
and that every proper initial segment is of cardinal k. 

This gives a binary function from into {0, 1}, denoted by (x < y), which is defined as 
follows : (x < y) = 1 <^ x < y. 

We can extend it to the realizability model Ad, which gives a function from (1k+) 2 into 22. 

Lemma 21. The following propositions are realized : 

Ifiel2, then (x<y) = i is a strict ordering of1, t K + , which we denote by 

If i is an atom of the Boolean algebra 12, then this ordering is total. 

We have immediately : 

i) I ||- yx^+\/y^+\/z 2K +((x <y)(y< z) <(x<z)); \\\- \/x 2k +((x<x) = 0). 

ii) I ||- V^ 2 Va jK +V K + ((PiX< P { y) < i). 

iii) I ||- Wx' 2ti +Wy 2K + ((x < y) = 0, (y < x) = x = y). 

It follows from (i) that, if i ^ 0, then (x < y) > i is a strict ordering relation on 1k + . 
It follows from (ii), that this relation, restricted to Xk + , is equivalent to (x <y) = i. 
Finally, it follows from (iii), that the relation (x<y) = i, restricted to 2{K + , is total when 
i is an atom of 12. 

Q.E.D. 

Lemma 22. The following propositions are realized : 

i) \/i^ 2 (the application x h-> (PjX, Pi_«x) is an isomorphism of strictly ordered sets 
from Qk + ,<) onto <k) x Qi-i«+, <i-*))- 

ii) Vf 2 (either orli_iK + is a well founded ordered set). 
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i) It follows from proposition [T2T v) . that the application x h-> (P%x, Pi—jx) is a bijection 
from H«+ onto 1iK + xH 1 _ i /t + . 

In fact, it is an isomorphism of ordered sets, since we have : 

I \\- Vr l2 V£ :iK+ V?/- lK + ((x <y) — (P%x < Piy)v(Pi-iX < Pi_»2/)) and therefore : 
\\- Vv 12 Vx 2K +Vy :SK+ ((x < y) — 1 (PjZ < P»j/) = z A (Pi-^a; < Pi_il/) = 1 — i). 

ii) By theorem [61 the relation (x<y) — 1 is well founded on 2k + . Thus, the result follows 
immediately from (i) and lemma 1201 

Q.E.D. 

2k, countable 

In this section, we consider the consequences of the hypothesis : (Ik is countable). 

Non extensional and dependent choice 

The formula Vz(z^y — » z£x) will be written x C y. 

The formula WxWyVy'((x, y) e f, (x, y')e f — >■ y — y') will be written Func(/) (read : / is 
a function). 

The formula Wz3f (f C z A Func(/) A WxWy3y'((x, y) ez — >■ (a;, ?/') e /)) 
is called the non extensional axiom of choice and denoted by NEAC. 

It is easily shown [18] that ZF e + NEAC h DC (axiom of dependent choice). On the other 
hand, we have built, in [18], a model of ZF e + NEAC + -AC ; and other such models 
will be given in the present paper. In all these models, M is not well orderable. 

Theorem 23. 

There exists a closed c-term H such that H \\- Qk is countable) — > NEAC. 

We apply theorem [T4l(ii) to the formula (x, y) e z. We get a function symbol g such that 
C I \\- VxV?/V2((x, y) e z — > 3z/- lft (x, g(v, x, z)) ez). 

Therefore, it suffices to prove NEAC in ZF e , by means of this formula and the additional 
hypothesis : {2k is countable). Now, from this hypothesis, it follows that there exists a 
strict well ordering < on Ik. Then, we can define the desired function / by means of the 
comprehension scheme : 

(x, y)s f -H- (x, y) e z A 3u^ K (y = g(u, x, z) A ^c? K (a < v — > (x, g(a, x,z))fiz). 
Intuitively, f(x) = g(u,x,z) for the least veIk such that (x, g(v, x, z)) ez. 

Q.E.D. 

Subsets of R 

Theorem 24. ||— (Ik is countable) — > 

every bounded above subset of the ordered set (1k + ,<) is countable. 

Every proper initial segment of the well ordering < on k + is of cardinal k. Thus, there 

exists a function 6 such that, for x ^ 0, the function a 4>(x, a) is a 
surjection from k onto {y G k + ; y<x}. Then, we have immediately : 
I |f- Vx 3k +V^ k + ((i/<i) = 14 (\/c? K (y ^ (j)(x,a)) -4 ±)). 
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This shows that, in M, there exists a surjection from 2k, onto every subset of 2k + which 

is bounded from above for the strict ordering <. 

Thus, all these subsets of 2k + are countable, since 2k is. 

Q.E.D. 

Theorem 25. |(— (2k is countable) — » there exists an injection from 2k + into K. 

The natural injection from 2k + = 2(2 K ) into (22)^ K gives an injection from 2k + into 
N N = M, since Hk, and thus also 22, is countable. 

Q.E.D. 

Theorem 26. The following formula is realized : (2k is countable) — » 

i/jere exists an application % \- >■ Xj /rom t/ie countable Boolean algebra 22 into V(M.) such 

that : 

i) Xq = {0} ; z 7^ — > Xj z's uncountably infinite ; 

ii) Xj x Xi is equipotent with Xi ; 

Hi) Xi n Xj = X iA j and therefore i < j — > Xi C Xj ; 
zaj = 0—7- Xj V:) - is equipotent with XiXXj ; 

v) if there is a surjection from Xj onto X i} then i < j ; 

more generally, if A is a subset of 22 and if there is a surjection from {Jj eA Xj onto Xi, 
then i < j for some j e A. 

vi) there exists a surjection from X\ onto R. 

For each ie22, let us denote by Xi the image of 2iK + by the injection from 2k + into M, 
given by theorem [25j 

i) The fact that Xi is infinite for i ^ is a consequence of theorem [T8j 

If i = 1, Xi is uncountable by (vi). If % ^ 0, 1 and Xj is countable, then X\_i is infinite 
and thus, there exists a surjection from Xi_, onto Xj. This contradicts corollary [T6l 

ii) by proposition [T2Tvi). X/s; + xl-/t + is equipotent with 2i(K 2 + ), thus also with 2iK + by 
proposition O 

iii) If aeHjK + and ae2jK + , then Pja = a, and therefore Pi A ja = Pja = a. 

iv) This is proposition [T2T v) . 

v) Application of corollary [T6l 

vi) Application of theorem [T71 

Q.E.D. 

Theorem [26] is interesting only if the countable Boolean algebra 22 is not trivial. In this 
case, K cannot be well ordered, by theorems [19] and [25] 

In the following section, given an arbitrary realizability algebra A, we build an algebra B 
such that : 

• Mb realizes the formula : (2k is countable). 

• The (countable) Boolean algebra 22 of the model Mb is elementarily equivalent to the 
algebra 22 of Ma- 
Id. the sequel, we shall consider two interesting cases : 

22 is atomless ; 22 has four e-elements. 
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3 Collapsing 2k 



In the ground model Ai, we consider a readability algebra A, the elementary combinators 
of which are denoted by B, C, E, I, K, W, cc and the continuations k n for tt G II. 

We define the combinators B*, C*, E*, I*, K*, W*, cc*, and the continuations k* as follows : 

B* = XnXxXyXz(((C)x)(C)y)zn ; 

C* = XnXxXyXz(x)nzy ; 

E* = XnXxXy{C)xyn ; 

I* = Xn\x(x)n ; 

K* = XnXxXy(x)n ; 

W* = XnXxXy(x)nyy ; 

k* = XnXx(k n )(x)n ; 

cc* = XnXx(cc)Xk(xn)XnXx(k)(x)n. 

Therefore, we have : 
B**z/.£.r?.C.7r>^ (Cf)(C?7)C ★ v . n ; 

E* * V . £ . 1] . 7T >?>- C£?7 * z/ . n ; 
l**z/.£.7r>^£*z/.7r; 

W* •kv.^.rj.-K^^'ku.rj.rj.-n ; 

CC* * V . £ . 71 >^ £ * V . k* . 7T. 

(reminder : the notation £ * n £' * n' means £ *7T ^ J_ =>- £' *7r' ^ JL). 

Let k be an infinite cardinal of M., k > card(A U II) ; we consider the tree (usually called 

/t <w ) of functions, the domain of which is an integer, with values in k. 

Let P be the ordered set obtained by adding a least element O to this tree. 

P is an inf-semi-lattice, the greatest element 1 of which is the function 0. 

The greatest lower bound of p, q G P, denoted by pq, is p (resp. q) if p, q 7^ O and q C p 

(resp. p C q). It is O in every other case. 

Remark. P \ {O} = k <u) is the ordered set used, in the method of forcing, to collapse (i.e. 
make countable) the cardinal k. 

We define a new realizability algebra B by setting : 
A = A x P ; n = nxP; A*n=(A*II)xP; 

(£,p) - (n,q) = (£.?r,pg) ; (£,p)*(ir,q) = (£*7r,pg) ; (£,p)(ri,q) = (C£r],pq). 
B = (B*,1) ; C = (C*,1) ;E = (E*,1) ;I = (I*,1) ;K = (K*,1) ; W = (W*,1) ; 
cc = (cc*,l) ; k (ff)P) = (K,p). 

We define, in M., a function symbol from PxN into {0, 1}, denoted by (p<n), by setting : 
(p«fi) = 1 <^>p^ O and the domain of p is an integer < n. 

We define JLg , that we shall denote also by JL, as follows : 

(£ *7r,p) G JL <^> (Vn G N)((p<n) = l^>^n.7rGl) for p G P , £ G A and tt G II. 
In particular, we have (£ * 7T, O) G JL for any £ G A, n G LL 

We check now that is a realizability algebra. 
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• (t,p)(v,q)*(*,r) i X (Z,p)*(v,Q) .for) £ JL : 

Suppose that (£*r) . n,pqr) G JL ; we must show (Q;?7*7r,pgr) G JL i.e. C£r)*n. ?r G 1 
for (pgr «n) = 1. Now, we have C^n-kn . 7r >^ £ * n . 77 . tt which is in X by hypothesis. 

• (B*, 1) * (£, p) • (77, 9) • (C, r) . fo s) £ X ((£, p)) (fo g)) (C, r) * (tt, s) £ A : 
Suppose that ((C^)(Cr/)C * n,pqrs) 6l;we must show : 

(B* . 77 . £ . tt, pqrs) G A i.e. B* *n . £ . 77 . ( . tt G X for (pgrs<n) — 1. 
Now, we have B* * n . £ . 77 . £ . tt (C£)(Cr))( * n . tt which is in X by hypothesis. 
. (C, 1) * (£, p) . (77, g) . (C, r) . (tt, s) £ X (£, p) * (C, r) . (77, g) . fo s) £ A : 
Suppose that (£ * £ . 77 . n,pqrs) G X ; we must show : 

(C* * £ . 77 . £ . 7r, pgrs) G A i.e. C**n.£.77.£.7rGX for (pgrs < n) = 1. 
Now, we have C**n.£.77.£.7r>^£*n.£.77.7r which is in X by hypothesis. 

• (E*, 1) * (£,p) . (77, q) . (tt, r) i X (£,p)fo g) * (tt, r) £ X : 
Suppose that (C£?7 * n,pqrs) G X ; we must show : 

(E* * £ . 77 . tt, pqr) G X i.e. E* * n . £ . 77 . tt G X for (pqr « n) = 1. 
Now, we have E* * n . £ . 77 . 7T >?*- C^rj -kn.TT which is in X by hypothesis. 

• (cc*, 1) * (£, p) . (vr, g) £ X (£, p) * (k;, q) . (tt, q) { X : 
Suppose that (£ * k* . 7r,pg) G X ; we must show : 

(cc* * £ . 7r, pg) G X i.e. cc* *n . £ . 7T G X for (pg<n) = 1. 

Now, we have cc* * n . £ . 7r >»- £ * n . k* . tt which is in X by hypothesis. 

• (k» * (£, ?) • fo r) ^ X ^ (£, g) * (tt, p) £ X : 
Suppose that (£ *7r,pg) G X ; we must show : 

(k* . w,pqr) G X i.e. k**n.£.roGX for (pgr < n) = 1 . 
Now, we have k**n.£.ti7>^£*77.7r which is in X by hypothesis. 

For each closed c-term r (built with the elementary combinators and the application), we 
define r* by recurrence : 

this is already done if r is an elementary combinator ; we set (tu)* = Ct*u*. 

In the algebra B, the value of the combinator r is tq = (t\, 1). 
In particular, the integer n of the algebra B is n B = (n* , 1). 

We have B = (0*, 1) = (K*, l)(l*, 1) ; therefore : 0* = CK*I*. 

We have ( n + 1 ) B = (( w + 1) *, 1) = fo, l)(n*, 1) ; therefore : ( 77+ 1 )* = C<r*n*. 
Thus, we have n* = (Gx*) n 0* for every n G N. 

We define the proof-like terms of the algebra B as terms of the form (9, 1) where 9 is a 
proof-like term of the algebra A. The condition of coherence for B is therefore : 
If 9 is a proof-like term of A, there exists n G N and ?t G II such that 9 -kn.TT ^ X. 
If ^4 is coherent, so is B : indeed, if 9 is a proof-like term of A, then so is #0 ; this gives 
a stack tt such that #0 * tt X. 

The truth value of a formula F in the algebra B will be denoted by \\F\\b or also |||F|||. 
The realizability models associated with the algebras A and B are denoted respectively 
by Ma an d Mb- 

We now define X G .M by setting : 

<Y = {((m, a), (vr,p)) ; 7r G II ; p G P \ {0},p(m) is defined and p(m) = a}. 
Theorem 27. 

The formula (X is a surjection from N onto Ik) is realized in the model Mb- 
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More precisely, we have : 

i) (0 , 1) |[| — VxVyVV ((x, y) e X ,y ^ y' -» (x, y') ^ wit/i O = XnXkXx(x)n ; 

u) (0i,l) 1 1 1 — \/y 2K [Vx mt ((x,y)tX) -»■ -1] mt/i 0i = AnAz(((((6)(C)a*)n)(Qx)0*)(a)n, 

9 = XfXn(n)XgXz(g)(f)z and a = (BW)(B)B (successor). 

i) Let m G N, G k, (?r,p) G |||(m, a)^<Y|||, (7r',p') G |||(m, a') £X\\\ 
and (£, g) |||— a ^ a'. 

Thus, we have m G dom(p),m G dom(p'),p(m) = a and p'(m) = a'. 
We show that : (0 , 1) * k^p) . (£, q) . (tt 1 , p') G X. 

We have to show that (0 O * k* . £ . 7r',pp'q) G JL ; this is obvious if pp'g = O. 
Otherwise, p and p' are compatible, thus a = a'. 

Let n be such that (pp'q<^n) = 1 ; we must show that 0o * n . k* . £ . 7r' G X i.e. 

Now, we have (£, g) |||— _L by hypothesis on (£, g), thus (£, g) * (7r', 1) G JL. 
Since (g<n) = 1, it follows that £ *n . 7r' G X. 

ii) Let us first show that 9\-k n.n .vj )^ 7] -k n + 1 . n* . 
for each n G N, -g G A and tu G II. 

We have Oi-kn.ii.vj^Q-k Ca* . n . Crj . 0* . n + 1 . w. 

By lemma [91 in which we set £ = Crj, <fi = Ccr*, a = 0*,^ = a, O = and ir = n + 1 . ro, 
we obtain : 

B\-kn.r}.w)¥- Cn * n* . n + 1 .zu (since n* = (O*) n 0*) 
>,*- n -k n + 1 . n* ,zu. 

We prove now that (0 1; 1) 1 1 1 — Vy 2K [\/x [nt ((x, y)fX) ->!.]. 
Let a G k, (r/,p ) llh Vx int ((x,a) ^ X) and (ro, g ) G LTxP ; 
we show that (0 1; 1) * (r],p ) . (to, g ) G JL. 

This is trivial if pogo = © ; otherwise, let n G N be such that Qoogo <w) = 1. 
We must show that 9\ -k n . rj . to G X, that is n * n + 1 . n* . w G X. 
But we have (r/,po) \\\- {(n*, 1)} — > (n,a)£X by hypothesis on rj. 

Since (pogo<' r = 1, we can define g G P with domain n + 1 such that g D poqo and 
g(n) = a. Then, we have (w, q) G |||(n, a) £X\\\ by definition of X. 
We have thus (i],p ) * (n*, 1) . (ro, g) G X that is (n * n* . to,p q) G X. 
But we have po<? — 9, an d therefore (n *n* . to, g) G X. 
Since (g <n + 1) = 1, it follows that n -k n + 1 . n* . G X. 
Q.E.D. 

Corollary 28. As realizes the non extensional axiom of choice and thus also DC. 

Indeed, by theorem l27l the model Mb realizes the formula : (2k is countable). 
But we have k = card(A U II U N), since k > card(A U IT U N) and k = card(P). 
Therefore Mb realizes NEAC, by theorem [231 

Q.E.D. 

Remark. Intuitively, the model Mb is an extension of the model Ma obtained by forcing, by 
collapsing 2k. We cannot apply directly the usual theory of forcing, because 2k is not defined 
in ZF. 
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Elementary formulas 

Elementary formulas are defined as follows, where t, u are terms of the language of ZF £ 
(built with variables, individuals, and function symbols defined in M) : 

• T, _L are elementary formulas ; 

• if U is an elementary formula, then t = u <—> U and Va; U are too ; 

• if U, V are elementary formulas, then U — > V too ; 

• if U is an elementary formula, then Vn mt £7 too. 

Remark, t ^ u is an elementary formula, and also t^lu (which can be written f(t,u) ^ 1 
where / is the function symbol defined in M by : f(a, b) = 1 iff a G b). 

If U is an elementary formula, then Vx^U is too : indeed, it is written Vx(/(a;,t) = 1 <^-» U). 

For each elementary formula U, we define, by recurrence, two formulas U p and U p , with 
one additional free variable p : 

1. U p = Vg 3P Vn int ((pg«n) = 1 ^ U q ) ; 

2. _L p = J_ and T p = T ; 

3. (t = u <-> U) p = (t = u <-> Up) ; (Vx U[x\)p = \/x U p [x] ; 

4. ([/ ->■ V) p = Vql p Vr 2P (p = qr^ (U q ->■ V r )) ; 

5. (Vn int f/[n]) p = Vn 3N ({n*} ->■ E/p[ra]), in other words : 
||(Vn int f/[n]) p || = {n* .n ; n G N, tt G ||£/p[n]||}. 

Lemma 29. For eac/i closed elementary formula U , we have : 
(tt,p) G |||C/||| ^ tt G ||C/ p || ; (£,p) \\\-u&z ih 

Proof by recurrence on the length of the formula U . 

1. We have |||- Z7 * (7r, <?) G JL for (tt, q) G \\\U\\\, that is : 

(£*7T,pg) G JL for every 7r G by the recurrence hypothesis, or also : 

(Vg G P)(V7r G ||C/ g ||)(Vn G N)((pg<n) = l^>^n.7rGl) which is equivalent to : 
£ |h Vg 3P Vn int ((pg«n) = 1 E/,) that is f |f- f/ p . 

2 and 3. Obvious. 

4. Any element of \\\U —> V\\\ has the form (£,<?) • (vr,r), i.e. (£.7r,p), with p = qr, 

(e, C/ and (7r,r)e ; 

by the recurrence hypothesis, this is equivalent to £ . tt G ||C/ 9 — >■ V^.||. 

5. We have |||Vn int f/[n]||| = |||Vn m ({(n*, 1)} ->■ C/[n])||| 

= {(n*, 1) . (tt,p) ; n G N, (tt, P ) G |||l/[ra]|||} = {(ra*. 7r,p) ; n G N, (tt, P ) G |||tf[ra]|||}. 
Thus, by the recurrence hypothesis, it is {(n*. ir,p) ; n G N, n G ||C^o[w]||}- 

Q.E.D. 

Lemma 30. For each elementary formula U, there exist proof-like terms O^^Ou, such 
that : 

i) 6%\\- Wp 2P Wn mt ((p«n) = 1 ^ (U ->• U p )) 

ii) 9\j \\- Wp 2P Wn mt ((p«n) = l^-> (U p -> U)) 
m) r° \\- V P Vn^((p«n) = 1 ^ (U ->■ f/ p )) 
wj |L- V P Vn m< ((p«n) = 1 (U p ->■ [/)) 
w?£/i Ty- = AnAxAm(6'^)ma; and = \n\x{6\jn){x)n. 
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We first show (iii) and (iv) from (i) and (ii). 

(i) =Kiii) 

Let p G P and n G N be such that (p«n) = 1 ; let £ |(— £7 and 7r G ||C/ P ||- 
We have to show : XnXxXm{9^j)mx *n . £ . tt G X. 

Now, by the definition (1) of £/ p , there exist q G P, m G N and U7 G ||?7 g || such that 
(pg<m) = 1 and 7r = m . w. Therefore, we have (g<m) = 1 and, by (i) : 
9fj ~k m . £ . vj G JL, hence AnAxAm(^)mx * n . £ . m . w G X. 

(ii) ^(iv) 

Let p G P, n G N, £ G A and tt G ||C/|| such that (p<n) = 1 and £ |(- f/ p . 

We have to show : XnXx{9\jn){x)n -k n . £ . 7r G JL i.e. ~k n * {^n • tt G JL. 

But, by the definition (1) of U p , in which we set q = p, we have £ri |(- C/ p ; therefore, the 

desired result follows from (ii). 

We now show (i) and (ii) by recurrence on the length of U. 

• If U is _L or T, we take 8y = Q\j = XnXx x. 

• UU=(t = u->V)orU = Vx 2t V, then 0° = 6° v and Q\j = 6 l v by (3). 

• If U = V — > W, let q, r G N and p = qr ; let n G N such that (p<n) = 1. We have : 

||- V -»• V 9 ; r^n Vi ; 6 Q w n \\- W -> W r ; ||- W r -> W. 

Let £ ||- 1/ — >■ W ; then, by the recurrence hypothesis, we have : 

(C™K lh V W r and (C™K°(4™) |j- V q -»■ W r . 

Thus, by (4), we obtain 6^ = AnAxA|/(0^n)(a;)(ryn)|/. 

Now, let £ |(- V q — > W r ; then, by the recurrence hypothesis, we have : 

{OwIkX \\- V q W and (0^n)o£o( r £n) ||- V ->• W. 

Thus, by (4), we obtain #L = AnAa;A|/(0^n)(a;)(ryn)?/. 

• If [/ = Vn mt V[n], we first prove : 

Lemma 31. 

There exist two proof-like terms T , 7\ such that, for every closed formula F of ZF e : 

i) T \\- Vn™(({n*} ->• P) ({n} -> P)). 

iij Ti Ih Vn 3N (({n} -> P) -> ({n*} -»■ P)). 

iii) For every elementary formula V[n], we have : 

T |h (Vn int V[n]) p -> Vn int V p [n] and T x \\- Vn m V p [n] -)• (Vn J ' n V[n]) p . 

i) We apply lemma [9] to the realizability algebra A, with : 

q = a,0 = 0,(f) = Ccr* and a = 0* ; we have 6 = XfXn(n)XgXz(g)(f)z. 
For every nGN,( G A and 7T G II, we obtain : 

* Ccr* . n . £ . 0* . tt )¥- £ *n* . tt for n G N, £ G A,7r G II, since n* = (Ccr*) n 0*. 
Therefore, if we set T = A/An((0)(C)cr*)n/O*, we have T * £ . n . tt )¥- £ * n* . tt. 
Thus, we have T ||- Vn 3N (({n*} -> P) ->■ ({n} P)). 

ii) We apply now lemma [9j to the realizability algebra B, with : 
q = erg, O = 0g, = (Ccr, 1) and a = (0, 1). 

Since Q B = (0*, l),n B = (cr B ) n B = (n*, 1), we get, by setting a 2 = (C) 2 cr : 
(0*, 1) * (Ccr, 1) . {n*, 1) . (£, 1) . (0, 1) . (tt, 1) (£, 1) * ((cr 2 ) n 0, 1) . (tt, 1) 
since ((Ccr, l)) n (0, 1) = (((C) 2 cr)"0, 1). We write this as : 
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(0* * Cor . n* . f . . 7T , 1) »~ (f * (o- 2 ) n • 7T , 1). 

It follows that 6* * . Ca . n* . £ . . 7r ^ £ * m . (cr 2 ) n . 7r for some m G N. 
Now, we set £ = (K)(T)r/, with T = \f\n(Q)anfO. Thus, we have : 
6**0. Ccr.n* . (K)(T)t7.0.tt ^ T*7?. (a 2 ) n .tt >^ 0*ct . (o- 2 ) n .r/ .0 .7t. 
We apply now lemma [HI to the realizability algebra A, with : 

= o"2, O = 0, = cr and a = 0. Thus, we obtain : 
O * cr . (o- 2 ) n .1] .O.tt ^ i]*n.iT for every nGl,(|G A and tt G II. 
Finally, if we set T\ = A/An((((e*0)(C)o>)(K)(T)/)0, we have : 
T 1 *r).n*.'K'd~r)*n.ir and therefore Ti |(- Vn- IN (({n} — > F) -» ({n*} — > F)). 
iii) This follows immediately from (i) and (ii), by definition of (Vn V[n]) p . 

Q.E.D. 

We can now finish the proof of lemma [301 considering the last case which is : 

• U = \/m int V[m]. 

We show that 9y = XnXx(Ti)Xm(8 v n)(x)m. 

By the recurrence hypothesis, we have 9y \\- Vp :iP Vn int ((p<n) = 1 °-» (V[m] — > V p [m])). 
Let p G P, n G N, £ G A be such that (p<n) = 1 and £ |(- Vm V[m]. 
Then, for every m G N, we have £m ||— V[m] ; thus {9 v n)(^)m ||— V^m] and therefore 
Am(^n)(()m (f Vm int l/ p [m]. By lemma[3TTm), we get (Ti)Ara(0^n)(£)m (f- (Vm int 1/[m]) p 
and therefore : Ax(T 1 )Am(6'y77,)(a;)m \\- \/m V[m] — >■ (Vm in V[m]) p . Finally : 
AnAz(T a )Am(0£n)(a:)m ||- Vp 3P Vn int ((p<<72) = 1 (Vm in V[m] -> (Vm in V[m]) p )). 

We show now that 0\j = XnXxXm(9 v n)(T Q )xm. 

By the recurrence hypothesis, we have 9 V |f- Vp-^Vn 111 * ((p <n) = 14 (^p[m] — > j 

Let p G P,n G N,£ G A be such that (p<n) = 1 and £ ||- (Vm int V[m]) p . 

By lemma l3~TT iii). we have T £ |(- Wm mt V p [m], thus T £m |(- V^[m]. 

Therefore (0y?l)(To)£ra |(- V[m], and Xm(9 v n)(T )^m \\- Vm mt V[m], hence the result. 

Q.E.D. 

Theorem 32. 

TTie same closed elementary formulas, with parameters in Ml, are realized in the models 
Ma and Mb- 

Let U be a closed elementary formula, which is realized in Ma and let 9 be a proof-like 
term such that 6 |(— [/. Then, we have (r^)n9 |(- £/ p for (p<n) = 1, by lemma l3"07 iii) ; 
therefore, setting p = = 1, we have ((t$)O0, 1) |||— U by lemma 1291 
Therefore, the formula U is also realized in the model Mb- 

Conversely, if (6, 1) |||- U with 6 G QP, we have 6 |f t/ 1 , by lemmaEl Thus r^0# |f C/ 
by lemma l3"07 iv) . 

Q.E.D. 
Remark. For instance : 

• If the Boolean algebra 22 has four e-elements or if it is atomless, in the model Ma, it is the 
same in the model Mb- 

• Arithmetical formulas are elementary. Therefore, by theorem the models Ma and Mb 
realize the same arithmetical formulas. In fact, this was already known, because they are the 
same as the arithmetical formulas which are true in A4 \15\ [T6] . 
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Arithmetical formulas and dependent choice 

In this section, we obtain, by means of the previous results, a technique to transform into 
a program, a given proof, in ZF + DC, of an arithmetical formula F. 
We notice that this program is a closed c-term, written with the elementary combinators 
B, C, E, I, K, W, cc without any other instruction. 

Thus, let us consider a proof of ZF £ h NEAC —> F. It gives us a closed c-term <3> such 
that $o lh NEAC — > F, in every realizability algebra. 

We now describe a rewriting on closed c-terms, which will transform $o hito a closed 
c-term $ such that $ |j- F in every realizability algebra A. 

By theorem |23| we have <3>i \\- (2k is countable) — > F with $x = \x(§ )(H)x. 
We apply this result in the algebra £>, which gives : 
($1, 1) |||- (2k is countable) -)■ F. 

Now, theorem [271 gives a closed c-term A such that (A, 1) |||— (2k is countable). 

It follows that 1)(A, 1) |||- F, i.e. (tf , 1) |{j — F, with ^ = C$*A. 

Since F is an arithmetical formula, it is an elementary formula. 

Therefore, by lemma |29| we have \& |j— F 1 . Now, by lemma l3"GT iv). we have : 

r\ \\- Vp 3P Vn int ((p«n) = 1 <-> (F p -> F)). 

We set p = 1 and n = 0, and we obtain r^O ||— F 1 — )■ F. 

Finally, by setting $ = (r^)0\&, we have $ |(- F. 
A relative consistency result 

In [TS], we have defined a countable realizability algebra A such that the characteristic 
Boolean algebra 32 of the model Na is atomless (in this example, we have k = N). 
If we apply the technique of section [3], in order to collapse 2k, we obtain a realizability 
algebra B and a model A/jg, the characteristic Boolean algebra of which is also atomless. 
Indeed, the property : (22 is atomless) is expressed by an elementary formula. 
But now 22 is the countable atomless Boolean algebra (they are all isomorphic). Therefore, 
by applying theorems [23] and [2H1 we obtain the relative consistency result (i) announced 
in the introduction. 

Remark. We note that this method applies to every realizability algebra such that we have : 
||- (22 is an atomless Boolean algebra). 

4 A two threads model (22 with four elements) 

In this section, we suppose that A is a standard realis ability algebra [IB] . 

This means, by definition, that the terms and the stacks are finite sequences, built with : 

the alphabet B, C, E, I, K, W, cc, k, .,(,),[,] 

a countable set of term constants (also called instructions) , 

a countable set of stack constants 

and that they are defined by the following rules : 

B, C, E, I, K, W, cc and all the term constants are terms ; 
if t,u are terms, the sequence (t)u is a term ; 
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if 7r is a stack, the sequence k[7r] is a term (denoted by k^) ; 

each stack constant is a stack ; 

if t is a term and tt is a stack, then t . tt is a stack. 

If t is a term and tt is a stack, then the ordered pair (t, tt) is a process, denoted by t * 7r. 

A proof-like term of .4. is a term which does not contain the symbol k. 

We now build a realizability model in which 12 has exactly 4 elements. 

We suppose that there are exactly two stack constants n°, tt 1 and one term constant d. 
For % G {0, 1}, let A* (resp. II 1 ) be the set of terms (resp. stacks) 
which contain the only stack constant 7r\ 

For i,j G {0, 1}, define X*- as the least set P C A 1 * II* of processes such that : 

1. d * j . tt G P for every 7T G II*. 

2. f * 7T G A* * IP, f ' * 7T' G P, £ * 7T >- f ' ★ 7T' =>• f * 7T G P 

3. If at least two out of three processes £*7r, ?7*7r, (-kn are in P, then d*2 . £ . 77 . ( . tt G P. 
Remarks. 

The preorder >- on A*II was defined at the beginning of section 1. 
We express condition 2 by saying that P is saturated in A 1 *IP. 

Following this definition of >-, the constant d is a halting instruction. Indeed, we have : 

We define X by : A * II \ X = (A * n° \ JLg) U (A 1 ★ n 1 \ X}) 

In other words, a process is in X if and only if 

either it is in Xq U Xj or it contains both stack constants tt°, tt 1 . 

Lemma 33. // £*7r G X* and £* tt y £' * tt' then £' -k tt' G X* (closure by reduction). 

Suppose that £ * ^0 >~ Co * n b > Co * £ X* and £ * 7r ^ X*. We may suppose that : 
(*) £0 * >~ Co * m exactly one step of reduction. 

Let us show that X* \ {£ * 7To} has properties 1,2,3 defining X* , which will contradict 
the definition of X* : 

1. If £ * 7r = d -k j . tt, with tt G 11*, then d -k j . tt y £ * tt' , thus £ * tt' = d * j . tt. 
Therefore £ * tt' q G X* , which is false. 

2. Suppose £*tt G AVIP, £*tt >- £'*7r' G JLj , £'*7r' ^ £0*^0- Then £*?r G J_J, b y ( 2 )- 
If £ -k tt = £ * tto, then £o * ^o C' * 71-7 j since £' * 7r' ^ £o * ^Oj it follows from (*) that 

* tt'q y * tt' and therefore £ * 7r G X* , which is false. 

3. Suppose that two out of the processes (, * tt, i] -k tt, ( * tt are in X* \ {£ * tt }, but 
d*2.£.77.£.7ris not. From (3), it follows that d * 2 . £ . 77 . £ . tt = £ * tt q . 

Thus, d * 2 . £ . rj . ( .tt y £' *tt' , and therefore £ ★ 7r = d * 2 . £ . 77 . £ . tt. 

Therefore £ * tt' G X* , which is false. 

Q.E.D. 

Lemma 34. X n J_i = 0. 

We prove that (A* * IT* \ X^) D X by showing that A 1 * IT 1 \ X l x has properties 1,2,3 
which define XL 



22 



1. d -k . 7r ^ A.\ because A.\ \ {d * . tc} has properties 1, 2, 3 defining JL\. 

2. Follows from lemma 1331 

3. Suppose £ * 7r , rj -kir ^ JL\ ; we show that d * 2 . £ • Vo • Co • ^ -U-i by showing 
that \ {d * 2 . £ . r/o . Co • ^o} has properties 1, 2, 3 defining A.\. 

1. Clearly, d * 1 . ix' G (X l x \ {d ★ 2 . £ • ?7o • Co • tto}) for every 7r' G II*. 

2. Suppose that £*7T G A l *IP, £*7r >- £'*7r' G X^, £'*7r' 7^ d *2 . £ . 770 . Co • tto and 
that £ * 7r ^ (Xi \ {d * 2 . £ • % • Co • M)- 

From (2), it follows that £*7r = d*2 . £0 • Vo • Co • ^o which contradicts £*7r >- £'*7r'. 

3. Suppose that two out of the processes £*7r, rj-kn, £*7r are in X^jd*^ . £ . r/ . £ . 7r } 
but that d * 2 . £ . . £ . 7r is not. 

It follows from (3) that d * 2 . £ . 77 . £ . 7r = d * 2 . £ • Vo • Co • ^O; i- e - 

C — Co; ^ = Vo, C = Co an d 7r = 7r . But this contradicts the hypothesis : 
£0*710, Vo*n (j£ J-*. 

Q.E.D. 

Theorem 35. This realizability algebra is coherent. 

Let 9 G QP be such that 9 * tt° G X° and * tt 1 G X 1 . Then * tt° G X° n X° which 
contradicts lemma 1341 

Q.E.D. 

Lemma 36. d2 f|- ('t/ie boolean algebra 12 has at most four e- elements). 

We show that d 2 || — ^x l2 \fy 22 (x 7^ 0, y 7^ 1, x 7^ y — > XAy 7^ x). 

Let i,j G {0, 1}, £ ||- i ^ 0, 77 ||- j ^ 1,£ \\- i j and tt G ||mj ^ i\\. 

Since 1 1 z a j 7^ i|| 7^ 0, we have i < j. Thus, there are three possibilities for (i, j) : 

i = j = ; i = j = 1 ; i = 0,j = 1. 

In each case, two out of the terms £, 77, £ realize _L. Thus, we have d * 2 . £ . 77 . £ . 7r G X. 

Q.E.D. 

Remark. If tt £ II \ (IIo U IIi), then £ * tt G X for every term £. Thus, we can remove these 
stacks and consider only II U II 1 . 

We define two individuals in this realizability model : 

70 = ({0} x n°) U ({1} x II 1 ) ; 71 = ({1} x II ) U ({0} x II 1 ). 

Obviously, 70, 71 C 22 = {0, 1} x II. Now we have : 

||Vx 32 (x^7o)|| = n° U n 1 = |1 _l_ |] and therefore I ||- ^Vx 32 (x^ 7o ). 

d0 |h 0^70 and dl |f- 1^ . 

It follows that 70, 71 are not e-empty and that every e-element of 70, 71 is 7^ 0, 1. 
Therefore : 

The Boolean algebra 22 has exactly four e-elements. 

We have £ \\- Vx (x s^q, xe^i — > _L) for every term £ : 

Indeed, |«£7o| = {kvr ; vr G IT} for i = 0, 1 and £ * k Po . k Pl . n G X if p-i G 11*. 

In the same way, we get : 

XxXyXz z \\- VxWy( y xe'ji,yE'yi,x 7^ y — > _L). 

It follows that 70,71 are singletons and that their ^-elements are the two atoms of 22. 
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22 has four e-elements and 2k is countable 

We now apply to the algebra A the technique expounded in section [3J in order to make 

In countable ; this gives a realizability algebra B. 

In this case, we have k = N, and therefore k + = V(k) = R. 

Now, there is an elementary formula which express that the Boolean algebra 22 has four 
e-elements, for instance : 3x {x ^0,i^l}A Vx 22 Vy 22 (x ^ 1, y ^ 1, x ^ y — > xy = 0). 
Therefore, the realizability model Mb realizes the following two formulas : 

(22 has four e-elements) ; (2k is countable). 

Let us denote by i , i\ the two atoms of 22 ; thus, we have — \ — i . 

We suppose that Ml \= V = L ; thus, there exists on k + = V(N) = Ra strict well 
ordering < of type Ki. This gives a function from R 2 into {0, 1}, denoted by (x<y), which 
is defined as follows : (x < y) = 1 x < y. 

We can extend it to M_a and Mb, which gives a function from QR) 2 into 22. 
From lemmas [21] and [221 we get : 

For i — i or ii, the relation (x < y) = i is a strict total ordering on 2^. and one of these 
two relations is a well ordering ; 

in order to fix the ideas, we shall suppose that it is for % = i . 

The relation (x < y) = 1 is a strict order relation on 2M., which is well founded. 

The application x h- > (P^x, P^x) from 2R onto HjoRxH^K. is an isomorphism of strictly 

ordered sets. 

It follows from theorem [THJ that each of the sets 2i M., H^M contain a countable subset. 
By corollary [161 there is no surjection from each one of the sets 3j M, H^M onto the other. 
Thus, there is no surjection from N onto H^H. or onto H^R. 
Therefore, the well ordering on 2i R has, at least, the order type Ni in Mb- 

Now, by theorem 124^ every subset of 2M., which is bounded from above for the ordering <, 
is countable ; thus, it is the same for the proper initial segments of Hj M and H^M, since 
these sets are totally ordered and 2R is isomorphic to H^Rx^jR. 

It follows that the well ordering on 3j IR is at most H\, and therefore exactly Ki. 
Moreover, there exists, on H^R, a total ordering, every proper initial segment of which is 
countable. 

Then, we can apply theorem [261 to the sets X^X^ which are the images of Hj R, II^R by 
the injection from 2k + into R, which is given by theorem [25j By setting X = X^, we 
obtain exactly the result (ii) of relative consistency announced in the introduction. 
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